CLAIM AMENDMENTS 



Claim Amendment Summary 
Claims pending 

• Before this Amendment: Claims 1-43 

• After this Amendment: Claims 1-5, 7-15, 17-21, 23-28, 30-31, 33, 
35-37 and 39-48 

Non-Elected, Canceled, or Withdrawn claims: Claims 6, 16, 22, 29, 

32, 34 and 38 

Amended claims: Claims 1, 7, 10, 17-19, 23-24, 26, 31, 37 and 39 
New claims: Claims 44-48 



Claims: 

1. (Currently Amended) A method for updating a filter engine 
opcode tree, comprising the following steps: 

(a) compiling a new query to derive a series of opcode objects; 

(b) traversing the opcode tree according to the series of opcode objects 
until an opcode object is encountered that is not included in the opcode tree, 
opcode objects being represented in the opcode tree as opcode nodes; and 

(c) adding new opcode tree opcode nodes to correspond to the 
encountered opcode object and subsequent opcode objects in the series of 
opcode objects; 

(d) updating a branch node in the opcode tree to add a reference to the 
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new opcode nodes, the branch node being referenced from a parent opcode 
node that corresponds to a last opcode object from the series of opcode objects 
that was found in the traversal of the opcode tree; and 

(e) implementing an optimized branch node that includes an optimized 
indexed lookup procedure, 

wherein the indexed lookup procedure is configured to return a set 

of (key, value) pairs, a single fkey, valued pair corresponding to one 

branch . 



2. (Original) The method as recited in claim 1, wherein one or more 
of the steps are performed dynamically at runtime. 

3. (Original) The method as recited in claim 1, further comprising 
performing steps (b) and (c) in a component of the filter engine. 

4. (Original) The method as recited in claim 1, further comprising 
executing the opcode tree against an input to evaluate the new query and one or 
more other queries against the input. 
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5. (Original) The method as recited in claiml, further comprising: 
receiving a request to remove a first query from the opcode tree; 
identifying one or more opcode nodes in the opcode tree that correspond 

to the first query; 

removing any identified opcode node that does not correspond to a second 

query. 

6. (Canceled) 

7. (Currently Amended) The method as recited in claim 1 6, the 
branch node further comprising updating the branch node to include an indexed 
lookup routine that references several dependent opcode nodes that perform a 
similar function. 

8. (Original) The method as recited in claim 7, further comprising 
analyzing opcode nodes that depend from the branch node and including the 
indexed lookup routine only if including the indexed lookup routine provides 
more efficient processing of the dependent nodes that a generic branch node 
processing routine. 

9. (Original) The method as recited in claim 7, the indexed lookup 
routine further comprising one of the following routines: a hash routine; a 
routine that uses tries; an interval tree routine. 
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10. (Currently Amended) A filter engine stored on one or more 
computer-readable media, in a physical embodiment, comprising: 

a filter table that includes a plurality of queries, at feast two of the queries 
including a common prefix; 

a compiler configured to compile each query into a series of opcode 
blocks; 

an opcode tree stored in memory and including opcode nodes that each 
correspond to an opcode block such that executing the opcode nodes evaluates 
the plurality of queries, at least one opcode node corresponding to an opcode 
block included in the common prefix; and 

an opcode merger configured to merge a new query to the opcode tree by 
adding at least one opcode node that corresponds to the new query to the 
opcode tree ± 

wherein, when an opcode node will depend from a branch node when 
added to the opcode tree, identifying one or more child opcode nodes that 
depend from the branch opcode; and 

implementing an optimized branch node that includes an optimized 
indexed lookup procedure if such implementation would increase branch 
processing efficiency and referencing the opcode node from the optimized 
branch node r 

wherein the indexed lookup procedure is configured to return a set of 
(key, value) pairs, a single (key, valued pair corresponding to one branch . 
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11. (Original) The filter engine as recited in claim 10, the opcode 
merger further configured to traverse the opcode tree to determine if an opcode 
node corresponding to the new query already exists in the opcode tree and add 
new opcode nodes that correspond to query opcode blocks that are not already 
included in the opcode tree. 

12. (Original) The filter engine as recited in claim 10, wherein opcode 
nodes corresponding to opcode blocks included in a common prefix are 
represented as a shared segment in the opcode tree, 

13. (Original) The filter engine as recited in claim 10, wherein queries 
are merged into the opcode tree dynamically at runtime. 

14. (Original) The filter engine as recited in claim 10, further 
comprising XPath queries in the plurality of queries. 

15. (Original) The filter engine as recited in claim 10, the compiler 
being further configured to create opcode objects that are configured to merge 
themselves into an appropriate location in the opcode tree. 

16. (Canceled) 
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17. (Currently Amended) The filter engine as recited in claim 10 ±6, 
wherein the optimized indexed lookup procedure further comprises a procedure 
selected from the following list: a hash function; a tries function; an interval tree 
function. 



18. (Currently Amended) The filter engine as recited in claim 10 ±6, 
wherein the opcode merger is further configured to restore an optimized branch 
node to a generic branch node when the optimized branch node is no longer 
more efficient that the generic branch node. 



19. (Currently Amended) A compiler stored on one or more 
computer-readable media , in a physical embodiment, containing computer- 
executable instructions for performing the following steps: 

receiving a query to be added to an opcode tree that represents a plurality 
of queries, at least two of which include similar prefixes; afrd 

compiling a query to produce one or more opcode objects that are each 
configured to merge into the opcode tree as an opcode node by determining an 
appropriate location in the tree to merge, and merging into the tree in 
accordance with a node context of the appropriate location; 

determining a function that the opcode object performs; 

determining if a branch node that will reference the opcode node 
corresponding to the opcode object also references other opcode nodes that 
perform a similar function; and 

implementing an optimized branching function in the branch node 
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including an optimized lookup procedure if the branch node can be optimized to 
more efficiently process the opcode nodes that it references, 

wherein the indexed lookup procedure is configured to return a set of 
(key, value") pairs, a single fkey r value) pair corresponding to one branch . 

20. (Original) The compiler as recited in claim 19, further comprising 
producing opcode objects that are further configured to merge into the opcode 
tree only if an identical opcode object corresponding to a similar query prefix is 
not already included in the opcode tree 

21. (Original) The compiler as recited in claim 19, wherein a query 
further comprises an XPath query. 

22. (Canceled) 

23. (Currently Amended) The compiler as recited in claim 19 22, 
wherein an optimized branching function further comprises a function selected 
from the following list of functions: a hash function, an interval tree function[[;]L 
and a function utilizing tries. 
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24. (Currently Amended) The compiler as recited in claim 19 32, 
wherein the branch node is configured to recognize a context where the 
optimized branching function is no longer efficient and to resort to its previous 
function if such a context develops. 

25. (Original) The compiler as recited in claim 19, wherein: 

the compiler is configured to receive the query and generate the opcode at 
runtime; and 

the opcode node is configured to merge itself into the opcode tree at 
runtime, 

26. (Currently Amended) An opcode object stored on one or more 
computer-readable media , in a physical embodiment, including computer- 
executable instructions that, when executed on a computer, perform the 
following steps: 

determining an appropriate location to merge itself as a new opcode node 
in an opcode tree when a query from which the opcode object is derived is 
added to a filter table represented by the opcode tree including opcode nodes 
that, when executed, evaluate the queries; 

evaluating a node context of the location to which the new opcode node 
will be added; and 

merging itself into the opcode tree by adding and/or modifying references 
from an opcode node or a branch node to the new opcode node x 
wherein evaluating a node context further comprises: 
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identifying a generic branch opcode from which the new node will depend; 

identifying one or more other nodes that depend from the generic branch 
opcode that include a similar expression as the new node: and 

if a sufficient number of the one or more other nodes exists, modifying the 
generic branch opcode to an optimized branch opcode that includes an indexed 
lookup procedure that is optimized to more efficiently process the similar 
expressions, 

wherein the indexed lookup procedure is configured to return a set of 
(key, valued pairs, a single (key, value) pair corresponding to one branch . 

27. (Original) The opcode block as recited in claim 26, further 
configured to perform the recited steps dynamically at runtime. 

28. (Original) The opcode block as recited in claim 26, further 
configured to perform the recited steps within a .NET environment. 

29. (Canceled) 
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30. (Original) The opcode block as recited in claim 26, wherein 
evaluating a node context further comprises: 

identifying an optimized branch opcode from which the new node will 
depend; 

identifying one or more other nodes that depend from the optimized 
branch opcode that include a similar expression as the new node; and 

if minimum threshold number of the one or more other nodes is not met, 
modifying the optimized branch opcode to a generic branch opcode that can 
process the number of one or more other nodes more efficiently than the 
optimized branch opcode can. 



31. (Currently Amended) A method for removing a first query from 
an opcode tree, comprising: 

identifying an opcode tree that includes opcode nodes representing 
multiple queries such that when the opcode tree is executed, each of the 
multiple queries is evaluated; 

identifying one or more opcode nodes that correspond to the first query; 

removing any opcode node that does not correspond to a second query; 

and 

modifying a branch node that references an opcode node that is removed 
from the opcode tree, 

wherein the modifying further comprises removing an optimized lookup 
function that includes an indexed lookup routine from the branch node if 
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removing the branch node renders the lookup function less efficient than a direct 
comparison function, 

wherein the indexed lookup routine is configured to return a set of (key, 
value 1 ) pairs, a single (key, valued pair corresponding to one branch . 

32. (Canceled) 

33. (Original) The method as recited in claim 32, wherein the 
modifying further comprises removing the branch node if the branch node 
references only one other opcode node other than the opcode node to be 
removed. 

34. (Canceled) 

35. (Original) The method as recited in claim 32, wherein the 
modifying further comprises implementing an optimized processing function in 
the branch node if the removal of the branch node creates a context in which the 
optimized processing function would increase efficiency of the branch node 
processing. 

36. (Original) The method as recited in claim 35, wherein the 
optimized processing function further comprises one of the following functions: a 
hash function; an interval tree function; a function using tries. 
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37. (Currently Amended) One or more computer-readable media in a 
physical em bodiment, containing computer-executable instructions that, when 
executed on a computer, perform the following steps; 

identifying an opcode block that corresponds to a query to be added to an 
opcode tree that represents multiple queries with a plurality of opcode nodes; 

identifying an appropriate location in an opcode tree to situate new opcode 
nodes that correspond to a sequence of opcode objects in the opcode block, the 
opcode tree including at least one shared opcode node that corresponds to at 
least two of the multiple queries; 

evaluating a location context; and 

modifying an opcode node or a branch node to incorporate a new opcode 

node^ 

wherein, the evaluation step further comprises evaluating a plurality of 
dependent opcode nodes that depend from a branch node from which the new 
opcode node depend; and 

the modifying step further comprises modifying the branch node to include 
an indexed lookup function if the dependent opcode nodes perform a similar 
function and processing the dependent opcode with the indexed lookup function 
increases the efficiency thereof, 

wherein the indexed lookup function is configured to return a set of fkey r 
value) pairs, a single (key, value 1 ) pair corresponding to one branch . 
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38. (Canceled) 



39. (Currently Amended) The one or more computer-readable media 
as recited in claim 3Z 38, the indexed lookup function further comprising a hash 
function, a tries function or an interval tree function. 

40. (Original) The one or more computer-readable media as recited in 
claim 37, wherein the queries are XPath queries. 

41. (Original) The one or more computer-readable media as recited in 
claim 37, wherein the steps are performed by an inverse query engine. 

42. (Original) The one or more computer-readable media as recited in 
claim 37, wherein the identifying step, the evaluating step and the modifying 
step are performed by the new opcode node. 



43. (Original) The one or more computer-readable media as recited in 
claim 37, wherein the steps are performed in a Common Language Runtime 
(CLR) environment. 
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44. (New) The method as recited in claim 1, wherein for each given 
(key, value) pair corresponding to one branch, the key is the value of matching 
literals in the branch, and the value identifies the branch to which the literal 
belongs. 

45. (New) The filter engine as recited in claim 10, wherein for each 
given (key, value) pair corresponding to one branch, the key is the value of 
matching literals in the branch, and the value identifies the branch to which the 
literal belongs. 

46. (New) The compiler as recited in claim 19, wherein for each given 
(key, value) pair corresponding to one branch, the key is the value of matching 
literals in the branch, and the value identifies the branch to which the literal 
belongs. 

47. (New) The opcode block as recited in claim 26, wherein for each 
given (key, value) pair corresponding to one branch, the key is the value of 
matching literals in the branch, and the value identifies the branch to which the 
literal belongs. 
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48. (New) The one or more computer-readable media as recited in 
claim 37, wherein for each given (key, value) pair corresponding to one branch, 
the key is the value of matching literals in the branch, and the value identifies 
the branch to which the literal belongs. 
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